CPUSE issue

[Basilio_Alcant1]

Unable to install GA Take 66 on azure checkpoint firewall, i have access to the internet from the gateway but automatic check for updates is not brining the hotfix available under CPUSE and the manual import of the package is not working either. See screenshots attached.

This is a new cluster of firewalls i deployed recently using their azure marketplace template. One gateway got the take 66 update fine but the other one is not coming up for some strange reason.

Any help you can provide would be greatly appreciated. 

[Dmitry_Gorn]

Can you share the contents of /etc/cloud-version.json from both members?

Azure images were recently updated to include Take 66 pre-installed (image build R81.10-335.1108 released on Sep 30):

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...

Please run: cpinfo -y all 
And see if this take is already installed.

Thanks

[Basilio_Alcant1]

We used whatever template was available at the time of the deployment which was on 09/12. Even if there is a new image that has take 66 already,  we are expecting the jumbo take to be available for installation on existing firewalls with previous versions of the image , so I m hoping I can install the hotfix instead of having to redeploy the gateways. 

Below is the output of the file.  

    "release": "R81.10",

    "take": "335",

    "build": "985",

    "platform": "azure",

    "license": "byol",

    "deployment_method": "GW",

    "template_name": "ha",

    "template_version": "20220130",

    "template_type": "marketplace"

}

[Basilio_Alcant1]

cpinfo output:

This is Check Point CPinfo Build 914000227 for GAIA
[CPFC]
No hotfixes..
[IDA]
No hotfixes..
[MGMT]
HOTFIX_R81_10_JUMBO_HF_MAIN Take: 66
[FW1]
HOTFIX_PUBLIC_CLOUD_CA_BUNDLE_AUTOUPDATE
HOTFIX_GOT_TPCONF_AUTOUPDATE
HOTFIX_R81_10_JUMBO_HF_MAIN Take: 66

FW1 build number:
This is Check Point's software version R81.10 - Build 020
kernel: R81.10 - Build 021
[SecurePlatform]
HOTFIX_R81_10_JUMBO_HF_MAIN Take: 66
[AutoUpdater]
No hotfixes..
[CPinfo]
No hotfixes..
[PPACK]
HOTFIX_R81_10_JUMBO_HF_MAIN Take: 66
[DIAG]
No hotfixes..
[CVPN]
HOTFIX_R81_10_JUMBO_HF_MAIN Take: 66
[CPUpdates]
BUNDLE_CPSDC_AUTOUPDATE Take: 21
BUNDLE_PUBLIC_CLOUD_CA_BUNDLE_AUTOUPDATE Take: 18
BUNDLE_GOT_TPCONF_AUTOUPDATE Take: 104
BUNDLE_HCP_AUTOUPDATE Take: 52
BUNDLE_R81_10_JUMBO_HF_MAIN Take: 66
[hcp_wrapper]
HOTFIX_HCP_AUTOUPDATE
[CPDepInst]
No hotfixes..
[cpsdc_wrapper]
HOTFIX_CPSDC_AUTOUPDATE

[Chris_Atkinson]

JHF T66 is shown already here?

[the_rock]

I believe DA build is not the newest one...does it give option to update it if you check for new packages?

[Basilio_Alcant1]

Hi @the_rock when i click on check for updates it does check for updates fine but no packages come up on CPUSE for me to download/install, by the way this behaviour doesn't happen on member 1 but member 2.

[the_rock]

Did you try failover? Reboot?

[Basilio_Alcant1]

yes i did same issue.

[Gregory_Azratz]

Hi @Basilio_Alcant1 

can  you please share the CPUSE logs

To collect all the relevant logs run the command:

da_cli collect_logs

It creates a tgz file on the folder where it was run, including all required files to analyze the issue.